Which of the following activities are usually looked for using passive intrusion-detection tools?
A) Unusual or excessive e-mail traffic
B) Changes to security
C) Unplanned system shutdowns
D) Port scans
E) All of the above

Question

Quizplus · Accepted Answer

Passive intrusion-detection tools monitor and analyze network traffic to detect suspicious activities without actively intervening. All the listed activities (unusual or excessive e-mail traffic, changes to security settings, unplanned system shutdowns, and port scans) can be indicators of potential security threats or breaches, and thus are typically monitored by passive intrusion-detection systems.

Which of the Following Activities Are Usually Looked for Using